SOL59722044 - PHP vulnerabilities CVE-2016-1903 and CVE-2016-1904

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2016-1904

Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the 1 phpescapeshellcmd or 2 phpescapeshellarg function, leading to a heap-based buffer overflow...

CVE-2016-1904

CVE-2016-1904 affects PHP 7.x before 7.0.2. Multiple integer overflows in ext/standard/exec.c are triggered by long inputs to php_escape_shell_cmd/php_escape_shell_arg, leading to a heap-based buffer overflow and potential DoS or other impact. Public documents consistently identify the vulnerabil...